SSL Configuration

this section explains how to configure secure sockets layer (ssl) on internet information services (iis) for first time users the configuration of ssl for a site includes the following steps create an ssl binding on a site verify the ssl binding by making a request to the site configure ssl options in iis by making ssl a requirement for the site prerequisites install microsoft iis in your virtual machine or computer obtain appropriate certificate for ssl encryption and for authenticating the identity of the server create an ssl binding open internet information services (iis) manager , and open server certificates click import , and upload the certificate after the certificate is imported, it appears on the server certificates page in the connections pane, go to sites > default web site in the actions pane, click bindings to create ssl binding the site bindings window opens click add , and enter the required information field description type select https from the dropdown menu ip address select all unassigned from the dropdown menu port enter 443 host name enter the host name of your virtual machine or computer ssl certificate from the dropdown menu, select the certificate that you uploaded in server certificates click ok iis creates a new ssl binding for your site next, you can verify whether the ssl binding works verify the ssl binding in the connections pane, go to> sites > default web site in the actions pane, under browser website , click the site you configured the site opens in your default browser if ssl is configured correctly, the url begins with https , indicating a secured connection configure ssl options in iis go to connections pane > sites > default web site on the default web site home page, open ssl settings select the require ssl checkbox select the accept button for client certificates click apply once you enable this setting, your host device is secured and you can access the application securely with https manage trusted root certificates for a local computer to prevent security warnings in the browser, you need to add the certificate to the trusted root certification authorities store on your local computer so that the browser recognizes it as a trusted source to add the certificate to the trusted root certification authorities , follow these steps click start and search for mmc on the file menu, click add/remove snap ins under available snap ins , select certificates and click add select computer account , and click next click finish , and then click ok in the console tree, go to certificates (local computer) > trusted root certification authorities right click certificates , and go to all tasks > import click next , and upload the same certificate you used for ssl binding the local computer now trusts your certificate, and any connections or applications that rely on this certificate will recognize it as secure and valid if you want to configure both your application database and configuration database to use ssl, refer to optional ssl configuration docid\ aei5nbqfmqwo5t3rabtex ssl offloading is enabled in iis reverse proxy, so we recommend deploying it only inside trusted network zones